Vulnerability Description
A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) to issue SQL commands, which may result in loss or corruption of data.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bd | Database Manager | 3.0.1.0 |
| Bd | Performa | <= 3.0.0.0 |
| Bd | Reada | <= 1.1.0.2 |
| Bd | Inoqula\+ | - |
| Bd | Kiestra Tla | - |
| Bd | Kiestra Wca | - |
Related Weaknesses (CWE)
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01Third Party AdvisoryUS Government Resource
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bVendor Advisory
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-142-01Third Party AdvisoryUS Government Resource
- https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bVendor Advisory
FAQ
What is CVE-2018-10595?
CVE-2018-10595 is a vulnerability with a CVSS score of 6.3 (MEDIUM). A vulnerability in ReadA version 1.1.0.2 and previous allows an authorized user with access to a privileged account on a BD Kiestra system (Kiestra TLA, Kiestra WCA, and InoqulA+ specimen processor) t...
How severe is CVE-2018-10595?
CVE-2018-10595 has been rated MEDIUM with a CVSS base score of 6.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-10595?
Check the references section above for vendor advisories and patch information. Affected products include: Bd Database Manager, Bd Performa, Bd Reada, Bd Inoqula\+, Bd Kiestra Tla.